Sign-in and registration go through this app’s API routes and your CanQuest backend; credentials are not sent directly from the browser to third parties.